General
- Target 2026-08-24_0cb0f0123ff043a25d72f7ccdef93d41_cryptolocker_elex
- Size 50KB
- Sample260825-x3htfsdp9w
- SHA256 c3a6140f122e47c3e032fc276c2dad6a0e278732578f202f8e1d526c066199b8
- MD5 0cb0f0123ff043a25d72f7ccdef93d41
- SHA1 abb85152b4922943366d8090e1845ca1a011eb2b
- SHA512 11e4e327cdc484522913fb445e5f9b5bed8f3e7d46a25171dbd656a7d7d91651e8ce4c75dfddc1286661ea86352274f26436305b1289ba320366f5ec7308acf2
- SSDEEP 768:bIDOw9UiaCHfjnE0Sfa7ilR0p9u6p4UsCOTcbJoICeAQ/z/e/:bIDOw9a0DwitDkvmoIO0/2
- TLSH T12733B73C6EE56972D2BB9AB6D9F251C6F834B4123A155C0E44CB13850C23F27FDA261E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-24_0cb0f0123ff043a25d72f7ccdef93d41_cryptolocker_elex.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-24_0cb0f0123ff043a25d72f7ccdef93d41_cryptolocker_elex.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-24_0cb0f0123ff043a25d72f7ccdef93d41_cryptolocker_elex
- Size 50KB
- SHA256 c3a6140f122e47c3e032fc276c2dad6a0e278732578f202f8e1d526c066199b8
- MD5 0cb0f0123ff043a25d72f7ccdef93d41
- SHA1 abb85152b4922943366d8090e1845ca1a011eb2b
- SHA512 11e4e327cdc484522913fb445e5f9b5bed8f3e7d46a25171dbd656a7d7d91651e8ce4c75dfddc1286661ea86352274f26436305b1289ba320366f5ec7308acf2
- SSDEEP 768:bIDOw9UiaCHfjnE0Sfa7ilR0p9u6p4UsCOTcbJoICeAQ/z/e/:bIDOw9a0DwitDkvmoIO0/2
- TLSH T12733B73C6EE56972D2BB9AB6D9F251C6F834B4123A155C0E44CB13850C23F27FDA261E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE